VulnerabilityModified
CVE-2005-0811
The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote authenticated users to bypass intended restrictions via a direct request to certain URLs.
MEDIUM 4.6EPSS 0.66%
Does this matter?
Lower severity and a low EPSS score (0.66%). Track it; it rarely justifies an emergency change on its own.
Description
The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote authenticated users to bypass intended restrictions via a direct request to certain URLs.
- CVSS 2.0
- 4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 0.66% probability · 50th percentile
- CISA KEV
- Not listed
- Affected
- notify technology/notifylink
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/14617
- http://www.kb.cert.org/vuls/id/131828Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/12843
- http://secunia.com/advisories/14617
- http://www.kb.cert.org/vuls/id/131828Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/12843
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.